#285 Pin point the version of `spring-core`
#285 Switching back to XML configuration for the back-end security layer
#285 Still declare the authentication manager